At this point in time, having the software available would do more harm than good, considering that 90% (or more) of software development in the auto industry seems to be done by electrical or mechanical engineers with little to no training in software development, and even less knowledge about security and vulnerabilities.
The auto industry does have a plethora of coding standards and software processes, but not enough institutional knowledge and foresight to produce secure software for connected devices. The fact that it hasn't been too catastrophic so far is more a testament to the technical limitations of the bus systems and ECUs than real security, but that is rapidly changing with the advanced hardware being put in cars today.
The auto industry does have a plethora of coding standards and software processes, but not enough institutional knowledge and foresight to produce secure software for connected devices. The fact that it hasn't been too catastrophic so far is more a testament to the technical limitations of the bus systems and ECUs than real security, but that is rapidly changing with the advanced hardware being put in cars today.